cleanerweb - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User cleanerweb joined AbuseIPDB in December 2025 and has reported 122 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇩🇪 159.100.6.19	1 hour ago	Just more 419 advanced fee fraud scams being hosted on Ultahost who do nothing about them: 247tra ... show more Just more 419 advanced fee fraud scams being hosted on Ultahost who do nothing about them: 247trademarket.com abundantthrives.com affiliatemarketlitepro.com aicryptocore.net alpha-primefx.com apexcoremarkets.net apexfutureswealth.com atlasedgeinc.pro atlasholdinginc.com atlaxchazebanking.com aurumtrustbnk.com bkofheritage.online blockfinex.ltd blocks-stream.pro bluecrestult.com bnkofheriitage.com capitalfinanceinvestments.com capitaltrustybk.com captgenuisplc.com cinderfcu.com citizensbaoox.com coinmarketcaa.com coldwalletexpert.com corecapitals.org cploot.com credencecapitaltrustbk.online cronasset.com crownmonarchbank.com denionline.com denzb.com deroidpro.com detrixalerce.org doubledoorcapital.com elitewealthholding.ltd finanvoinvestmentinc.com fullinvest.pro gdanskcapitalbk.online globalpipnations.org guarantyfbk.com halalethics.net imperialtrademarket.com infinityvaultcapital.com etc..... show less	Phishing
🇺🇸 8.39.235.63	07 Jun 2026	This is ZainHosting in Pakistan - they use vebhost.com as nameservers for the scam domains, they do ... show more This is ZainHosting in Pakistan - they use vebhost.com as nameservers for the scam domains, they do this so people don't know it's Zainhosting that hosts scam sites. They are hosting a variety of different 419 advanced fee fraud scam sites here such as fake logistics scams, fake investment scams and fake bank scams for example. apexforgepro.com bistrust.com bitfarms-ltd.com bluestonesntb.online bncryptoincnet.com capitalnationalcu.com eimaewc.com mtb-int.com next-traders.com nostrononlinegroup.com prime-shares.com skyiprivateb.com standard-genesis-ltd.com uniondevelopmentb.com vodatrust.online zentrovacapital.com show less	Phishing
🇺🇸 198.37.123.126	07 Jun 2026	This is ZainHosting in Pakistan - they use vebhost.com as nameservers for the scam domains, they do ... show more This is ZainHosting in Pakistan - they use vebhost.com as nameservers for the scam domains, they do this so people don't know it's Zainhosting that hosts scam sites. They are hosting a variety of different 419 advanced fee fraud scam sites here such as fake logistics scams, fake investment scams and fake bank scams for example. cedricapital.com oceansuissecapital.com qfsledgerquantum.org semtezminingfx.com silver-stonefcu.com stamfordmemberscredit.com themeramexcooperative.com trustremittance.com zimtradesavings.com show less	Phishing
🇺🇸 154.16.170.58	07 Jun 2026	So this is vebhost.com - dummy site, used as nameservers for the scam domains - ZainHosting in Pakis ... show more So this is vebhost.com - dummy site, used as nameservers for the scam domains - ZainHosting in Pakistan is the real host - they do this so people don't know it's Zainhosting that hosts 419 advanced fee fraud scam sites. The IP is already listed on Spamhaus and has an SBL listing: https://check.spamhaus.org/results?query=154.16.170.58 SBL618921 - 154.16.170.58 2026-02-15 16:19:22 - tier.net phishing/fraud server Update 5th February 2025 Problem still exists, phishing all over this place: This issue has been reported before, but there is still an on-going 419 advanced fee fraud problem on these servers: alsagx.com apexindexpro.com capitaruta.live elitewavemb.com fxnexor.com globalultrasgen.live incomecreation.org indexprotraders.org monexpremium.com ploxiva.com premiumglobalonline.com ssb-groupcorp.com ssbnk-group.com unionmarvixservice.com unique-mining.com vexatrust.online show less	Phishing
🇳🇱 37.49.229.75	06 Jun 2026	Even more scam sites on there: assetstrustbnk.online biomexprime.top bossuemporium.xyz build ... show more Even more scam sites on there: assetstrustbnk.online biomexprime.top bossuemporium.xyz buildstock-trade.com coin-marketcapital.biz greatriverltd.info horizcaptassetincs.com megatradespro.com meritprofits.com nexasovera.xyz nuvoryxtradepartners.com qfsglobal-ledger.com qfsworldweb3asset.com securestress.com standardtrustoffshore.com sureproofgrowth.com trustglobalcapital1st.best universalfinancialacc.icu zyvotradenetwork.com This is a fraud facilitating nameserver The server IP now has an SBL listing on Spamhaus because of them - https://check.spamhaus.org/results?query=37.49.229.75 SBL697934 - 37.49.229.75 2026-06-02 12:55:30 - estoxy.com Phishing / scam sites show less	Phishing
🇺🇸 216.244.65.54	06 Jun 2026	This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com They advertise t ... show more This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com They advertise themselves on social media as a DMCA ignoring web host, what this means in practise is that they allow 419 advanced fee fraud scam sites to be hosted their without the fear of being terminated. This is hosting the following nameserver: dns1.geebytesdns.com dns2.geebytesdns.com We can see the scam sites here: https://dns.coffee/nameservers/dns1.geebytesdns.com Using WOWRack IPs: 216.244.65.50 and 216.244.65.54 to host scam sites. show less	Phishing
🇺🇸 198.251.84.7	03 Jun 2026	This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ... show more This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy. Here are some of the sites hosted on this IP: citynatonlbnk.com dinominestrade.org fortixcreditunion.com indextrega.com nationalbnk.com paysoul.org perfect-digital.org speedsbrave.org standardencryptedtrade.com standardwisecreditunion.com starprocapital.com texco-fund.com transitsasset.com troveexperts.org unitycrestlimited.com zylotradedigital.org show less	Phishing
🇺🇸 198.251.81.49	03 Jun 2026	This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ... show more This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy. Here are some of the sites hosted on this IP: axion-access.com beacon-global-investments.xyz bkofficial.live capitalstonebridgemining.com digitaldexltd.com equatrust.ltd infernumglobalreserve.com luxorachain.com northspringcapitalbank.com stockexchangemarketing.com swiftpaycreditun.com ultimextradex.live ultrafintradex.live velorian-capital.com wealthholdingsempire.com wfonline.biz zodorx.live show less	Phishing
🇩🇪 198.251.89.229	03 Jun 2026	This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ... show more This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy. Here are some of the sites hosted on this IP: afxsignal.top ascuonlinebanking.com brisbroker.com crescenttrustbnk.com digitalmarketingencompass.com elitemint.top finstrisemine.net grandcoreinvest.com nextrds.top okxtrades.net primefinanceoptions.com remgroinvt.top sovereigntrdplatform.click terrapips.top teslatreasury.com trdsolutiontd.top trdswave.click show less	Phishing
🇩🇪 198.251.89.82	03 Jun 2026	This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ... show more This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy. Here are some of the sites hosted on this IP: avasignal.top bestsimplexmarkets.com bitmaxappglobal.pro brightgrowths.live capital-lite.live citymendmanagements.live coasterfund.pro digitaltradechainplc.com elitewavetradingplatform.com finurawealthventure.pro gain-bullish.com globalfirmelite.pro gloptions.top litwave.live novasignals.top point72asset-trade.net puremingx.pro swiftfund.live terraeco.top teslastocks.net uniquegoals.live zenithgurus.pro show less	Phishing
🇺🇸 163.61.188.9	02 Jun 2026	This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ... show more This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity. Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com https://dns.coffee/nameservers/dns1.lytehosting.com https://dns.coffee/nameservers/dns2.lytehosting.com https://dns.coffee/nameservers/dns3.lytehosting.com https://dns.coffee/nameservers/dns4.lytehosting.com Also using the following IPs to host scam sites: 163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105 This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush : newdhaka.net currently has 6 SBL listings for IPs under its responsibility. https://check.spamhaus.org/sbl/listings/newdhaka.net/ show less	Phishing
🇺🇸 163.61.188.5	02 Jun 2026	This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ... show more This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity. Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com https://dns.coffee/nameservers/dns1.lytehosting.com https://dns.coffee/nameservers/dns2.lytehosting.com https://dns.coffee/nameservers/dns3.lytehosting.com https://dns.coffee/nameservers/dns4.lytehosting.com Also using the following IPs to host scam sites: 163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105 This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush : newdhaka.net currently has 6 SBL listings for IPs under its responsibility. https://check.spamhaus.org/sbl/listings/newdhaka.net/ show less	Phishing
🇺🇸 163.61.188.2	02 Jun 2026	This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ... show more This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity. Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com https://dns.coffee/nameservers/dns1.lytehosting.com https://dns.coffee/nameservers/dns2.lytehosting.com https://dns.coffee/nameservers/dns3.lytehosting.com https://dns.coffee/nameservers/dns4.lytehosting.com Also using the following IPs to host scam sites: 163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105 This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush : newdhaka.net currently has 6 SBL listings for IPs under its responsibility. https://check.spamhaus.org/sbl/listings/newdhaka.net/ show less	Phishing
🇫🇷 51.38.160.48	30 May 2026	This IP is being abused by spacemelon.net who are 419 advanced fee fraud scam facilitators that allo ... show more This IP is being abused by spacemelon.net who are 419 advanced fee fraud scam facilitators that allow other Nigerian scammers to host scam sites without being terminated: Name Servers: ns1.spacemelon.net ns2.spacemelon.net We can see a list of the scam sites on the nameserver: https://dns.coffee/nameservers/ns1.spacemelon.net Here are just some of the scam sites that they are hosting on this IP, these sites are also flagged as malicious by Netcraft aknanwmb[.]win \| fake bank scam apexglobalstoc[.]com \| fake investment scam bluepillarcu[.]online \| fake bank scam capitalassetscu[.]com \| fake investment scam capitalsetscru[.]com \| fake investment scam celeritys[.]ink \| fake investment scam eicbl[.]com \| fake bank scam fastlanedeliveryco[.]com\| fake logistics scam globalstockspro[.]com \| fake investment scam globalstockst[.]com \| fake investment scam globalstocksvest[.]com \| fake investment scam primecapit[.]sbs \| fake investment scam swiftreliancegrp[.]org \| fake bank scam show less	Phishing
🇩🇪 86.107.77.213	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.119	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.112	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.108	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.98	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.91	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇺🇸 216.152.151.9	26 May 2026	This IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Niger ... show more This IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Nigerian scammers The following nameservers are being used ns1.redhosta.com ns2.redhosta.com We can see all of the scam sites here: https://dns.coffee/nameservers/ns1.redhosta.com Here are some of the scam sites hosted on this server: truistherionline.com \| fake bank scam thewestbkkonline.com \| fake bank scam lexonumdelivery.com \| fake logistics scam fedcargologistics.com \| fake logistics scam primaxaitrade.com \| fake investment scam show less	Phishing
🇺🇸 204.13.237.20	25 May 2026	sailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com a ... show more sailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com are in Nigeria. They host scam sites for Nigerian scammers, such as fake investment scams, fake bank scams, crypto wallet phishing scams, fake logistics scams and various other 419 advanced fee fraud scams designed to get the victim to pay an advanced fee for something that doesn't exist. We can see some of the scam sites on one of their many nameservers: https://dns.coffee/nameservers/ns23.sailexhosting.com alphaprocoinbot.com assetmanfaat.com bitormine.com bitormining.com blinancetrades.com evertrustinvest.live exchangemarketcoin.com fastigiumoption.com firmatrustbnk.com fxtmtrade.com globalhedgemarketingfund.com habitatgrouppanama.com investaroprofit.com leexoratradesystem.com miltacticalhub.com novaraheritage.com octaconnectledger.com ogtrx.org oxadigitals.com primecapitals.us primehubcapital.com show less	Phishing
🇩🇪 167.235.14.117	21 May 2026	This is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee f ... show more This is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee fraud scams on a massive scale lytehosting.com are Nigerian 419 advanced fee fraud scam facilitators and host scam sites for Nigerian scammers. They use the following nameservers: Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com Here are some of the scam sites being hosted here autintl.online \| fake bank scam coinbinoz.sbs \| fake investment scam earnflow.top \| fake crypto investment scam fidshore.com \| fake logistics scam flaress.network \| crypto scam hbaz.org \| fake bank scam natiopayx.org \| fake bank scam omnimusk.live \| fake investment scam promusk.top \| fake investment scam prosevex.com \| fake investment scam show less	Phishing
🇳🇱 192.142.10.186	21 May 2026	hosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com ... show more hosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com who are Nigerian 419 advanced fee fraud scam facilitators. We can see the scam sites listed here: https://dns.coffee/nameservers/ns1.hlogicdock.cloud Here are some of the scam sites being hosted here, all sites verified as 419 advanced fee fraud scam sites and flagged as malicious by Netcraft: fake investment scams: ---------------------- astrieycapital.com crypishrre.com fortifdue.online (flagged as malicious in Chrome) nobitsventure.com rdmprotocol.online smartwaveportfolio.com stickoinai.com fake bank scams: ---------------------- bluecresttbs.com bluepillarstone.com coasmerb.com dierechnungen.com goldbridgeplc.com grandccrest.com harborridgeway.com haventobnk.com kytrdoffshore-portal.online meritcapinc.com montconcap.com noblepayz.com pacwestbcp.com regionfinancials.com squaremaxences.com standardstrust.com torodfb.com unit5577privatedept.online untitytcu.online show less	Phishing
🇺🇸 163.61.188.9	21 May 2026	This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud orig ... show more This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud originating from West Africa on a MASSIVE scale They use the following IPs to host: 163.61.188.5 / 163.61.188.7 / 163.61.188.9 We can see the huge amount of scam sites that get added every day here: https://dns.coffee/nameservers/dns1.lytehosting.com IP is listed on Spamhaus with 3 listings: Spamhaus Blocklist (SBL), eXploits Blocklist (XBL) & CSS Blocklist (CSS) https://check.spamhaus.org/results/?query=163.61.188.9 show less	Phishing